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Abstract. Besides the complexity in time or in number of messages, a common approach! for ana- 
lyzing distributed algorithms is to look at the assumptions they make on the underlying network. We 
investigate this question from the perspective of network dynamics. In particular, we ask how a given 
property on the evolution of the network can be rigorously proven as necessary or sufficient for a 
given algorithm. The main contribution of this paper is to propose the combination of two existing 
tools in this direction: local computations by means of graph relabelings, and evolving graphs. Such 
a combination makes it possible to express fine-grained properties on the network dynamics, then 
examine what impact those properties have on the execution at a precise, intertwined, level. We illus- 
trate the use of this framework through the analysis of three simple algorithms, then discuss general 
implications of this work, which include (i) the possibility to compare distributed algorithms on the 
basis of their topological requirements, (ii) a formal hierarchy of dynamic networks based on these 
requirements, and (iii) the potential for mechanization induced by our framework, which we believe 
opens a door towards automated analysis and decision support in dynamic networks. 



1 Introduction 

The past decade has seen a burst of research in the field of communication networks. This is particularly 
true for dynamic networks due to the arrival, or impending deployment, of a multitude of applications 
involving new types of communicating entities such as wireless sensors, smartphones, satellites, vehicles, 
or swarms of mobile robots. These contexts offer both unprecedented opportunities and challenges for the 
research community, which is striving to design appropriate algorithms and protocols. Behind the apparent 
unity of these networks lies a great diversity of assumptions on their dynamics. One end of the spectrum 
corresponds to infrastructured networks, in which only terminal nodes are dynamic - these include 3G/4G 
telecommunication networks, access-point-based Wi-Fi networks, and to some extent the Internet itself. 
At the other end Ues delay -tolerant networks (DTNs), which are characterized by the possible absence 
of end-to-end communication route at any instant. The defining property of DTNs actually reflects many 
types of real-world contexts, from satellites or vehicular networks to pedestrian or social animal networks 
(e.g. birds, ants, termites). In-between lies a number of environments whose capabilities and limitations 
require specific attention. 

A consequence of this diversity is that a given protocol for dynamic networks may prove appropriate in 
one context, while performing poorly (or not at all) in another. The most common approach for evaluating 
protocols in dynamic networks is to run simulations, and use a given mobility model (or set of traces) to 
generate topological changes during the execution. These parameters must faithfully reflect the target con- 
text to yield an accurate evaluation. Likewise, the comparison between two protocols is only meaningful 
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if similar traces or mobility models are used. This state of facts makes it often ambiguous and difficult to 
judge of the appropriateness of solutions based on the sole experimental results reported in the literature. 
The problem is even more complex if we consider the possible biases induced by further parameters like 
the size of the network, the density of nodes, the choice of PHY or MAC layers, bandwidth limitations, 
latency, buffer size, etc. 

The fundamental requirement of an algorithm on the network dynamics will likely be better understood 
from an analytical standpoint, and some recent efforts have been carried out in this direction. They include 
the works by O'Dell et al. Il23l and Kuhn et al. flSl . in which the impacts of given assumptions on the 
network dynamics are studied for some basic problems of distributed computing (broadcast, counting, 
and election). These works have in common an effort to make the dynamics amenable to analysis through 
exploiting properties of a static essence: even though the network is possibly highly-dynamic, it remains 
connected at every instant. The approach of population protocols fl,'21 also contributed to more analytical 
understanding. Here, no assumptions are made on the network connectivity at a given instant, but yet, the 
same fundamental idea of looking at dynamic networks through the eyes of static properties is leveraged 
by the concept of graph of interaction, in which every entity is assumed to interact infinitely often with 
its neighbors (and thus, dynamics is reduced to a scheduling problem in static networks). Besides the fact 
that the above assumptions are strong - we will show how strong in comparison to others in a hierarchy -, 
we believe that the very attempt io flatten the time dimension does prevent from understanding the true 
requirements of an algorithm on the network dynamics. 

As a trivial example, consider the broadcasting of a piece of information in the network depicted in 
Figure [T] The possibility to complete the broadcast in this scenario clearly depends on which node is the 
initial emitter: a and h may succeed, while c cannot. Why? How can we express this intuitive property 
the topology evolution must have with respect to the emitter and the other nodes? Flattening the time- 
dimension without keeping information on the ordering of events would obviously loose some important 
specificities, such as the fact that nodes a and c are in a non-symmetrical configuration. How can we prove, 
more generally, that a given assumption on the dynamics is necessary or sufficient for a given problem 
(or algorithm)? How can we find (and define) property that relate to finer-grain aspects than recurrence or 
more generally regularities. Even when intuitive, rigorous characterizations of this kind might be difficult 
to obtain without appropriate models and formaUsms - a conceptual shift is needed. 



a b 

beginning 



movement 



end 



Fig. 1. A basic scenario, where a node (b) moves during the execution. 



We investigate these questions in the present paper Contrary to the aforementioned approaches, in 
which a given context is first considered, then the feasibility of problems studied in this particular con- 
text, we suggest the somehow reverse approach of considering first a problem, then trying to characterize 
its necessary and/or sufficient conditions (if any) in terms of network dynamics. We introduce a general- 
purpose analysis framework based on the combination of 1) local computations by means of graph re- 
labelings [19|, and 2) an appropriate formaUsm for dynamic networks, evolving graphs ifTSll . which for- 
malizes the evolution of the network topology as an ordered sequence of static graphs. The strengths of 
this combination are several: First, the use of local computations allows to obtain general impossibility 
results that do not depend on a particular communication model {e.g., message passing, mailbox, or shared 
memory). Second, the use of evolving graphs enables to express fine -grain network properties that remain 
temporal in essence. (For instance, a necessary condition for the broadcast problem above is the existence 
of a temporal path, or journey, from the emitter to any other node, which statement can be expressed us- 



2 



ing monadic second-order logic on evolving graphs.) The combination of graph relabelings and evolving 
graphs makes it possible to study the execution of an algorithm as an intertwined sequence of topological 
events and computations, leading to a precise characterization of their relation. The framework we propose 
should be considered as a conceptual framework to guide the analysis of distributed algorithms. As such, 
it is specified at a high-level of abstraction and does not impose the choice for, say, a particular logic (e.g. 
first-order vs. LMSO) or scope of computation (e.g. pairwise vs. starwise interaction), although all our ex- 
amples assume LMSO and pairwise interactions. Finally, we believe this framework could pave the way 
to decision support systems or mechanized analysis in dynamic networks, both of which are discussed as 
possible applications. 

Local computations and evolving graphs are first presented in Section |2] together with central prop- 
erties of dynamic networks (such as connectivity over time, whose intuitive implications on the broadcast 
problem were explored in various work - see e.g. [3 6|). We describe the analysis framework based on the 
combination of both tools in Section[3] This includes the reformulation of an execution in terms of relabel- 
ings over a sequence of graphs, as well as new formulations of what a necessary or sufficient condition is 
in terms of existence and non-existence of such a relabeling sequence. We illustrate these theoretical tools 
in Section|4]through the analysis of three basic examples, i.e., one broadcast algorithm and two counting 
algorithms, one of which can also be used for election. (Note that our framework was recently applied to 
the problem of mutual exclusion in flSl.) The rest of the paper is devoted to exploring some implications 
of the proposed approach, articulated around the two major motifs of classification (Section|5]l and mech- 
anization (Section |6l). The section on classification discusses how the conditions resulting from analysis 
translate into more general properties that define classes of evolving graphs. The relations of inclusion 
between these classes are examined, and interestingly-enough, they allow to organize the classes as a 
connected hierarchy. We show how this classification can reciprocally be used to evaluate and compare 
algorithms on the basis of their topological requirements. The section on mechanization discusses to what 
extent the tasks related to assessing the appropriateness of an algorithm in a given context can be auto- 
mated. We provide canonical ways of checking inclusion of a given network trace in all classes resulting 
from the analyses in this paper (in efficient time), and mention some ongoing work around the use of the 
coq proof assistant in the context of local computation, which we believe could be extended to evolving 
graphs. Section |7]eventually concludes with some remarks and open problems. 

2 Related work - the building blocks 

This section describes the building blocks of the proposed analysis framework, that are. Local Computa- 
tions to abstract the communication model. Graph Relabeling Systems as a formalism to describe local 
computations, and Evolving Graphs to express fine-grained properties on the network dynamics. Reading 
this section is required for a clear understanding of the subsequent ones. 

2.1 Abstracting communications through local computations and graph relabelings 

Distributed algorithms can be expressed using a variety of communication models {e.g. message passing, 
mailboxes, shared memory). Although a vast majority of algorithms is designed in one of these models 
- predominantly the message passing model -, the very fact that one of them is chosen implies that 
the obtained results (e.g. positive or negative characterizations and associated proofs) are limited to the 
scope of this model. This problem of diversity among formalisms and results, already pointed out twenty 
years ago in [20], led researchers to consider higher abstractions when studying fundamental properties of 
distributed systems. 

Local computations and Graph relabelings were jointly proposed in this perspective in fl9\. These 
theoretical tools allow to represent a distributed algorithm as a set of local interaction rules that are in- 
dependent from the effective communications. Within the formalism of graph relabelings, the network is 
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represented by a graph whose vertices and edges are associated with labels that represent the algorith- 
mic state of the corresponding nodes and links. An interaction rule is then defined as a transition pattern 
{preconditions, actions), where preconditions and actions relate to these labels values. Since the inter- 
actions are local, each transition pattern must involve a limited and connected subset of vertices and edges. 
Figure |2] shows different scopes of computation, which are not necessarily the same for preconditions 
and actions. 





(b) 



(c) 



(d) 



Fig. 2. Different scopes of local computations; the scope of preconditions is depicted in white (on left sides), while 
the scope of actions is depicted in black (on right sides). The dashed elements represent entities (vertices or edges) 
that are considered by the preconditions but remain unchanged by the actions. 



The approach taken by local computations shares a number of traits with that of population proto- 
cols, more recently introduced in [1.2 |. Both approaches work at a similar level of abstraction and are 
concerned with characterizing what can or cannot be done in distributed computing. As far as the scope 
of computation is concerned, population protocols can be seen as a particular case of local computation 
focusing on pairwise interaction (see Figure [2(c)) . The main difference between these tools (if any, besides 
that of originating from distinct lines of research), has more to do with the role given to the underlying 
synchronization between nodes. While local computations typically sees this as an lower layer being itself 
abstracted (whenever possible), population protocols consider the execution of an algorithm given some 
explicit properties of an interaction scheduler. This particularity led population protocols to become an 
appropriate tool to study distributed computing in dynamic networks, by reducing the network dynamics 
into specific properties of the scheduler {e.g., every pair of nodes interact infinitely often). Several variants 
of population protocols have subsequently been introduced {e.g., assuming various types of fairness of the 
scheduler and graphs of interaction), however we believe the analogy between dynamics and scheduling 
has some limits {e.g., in reality two nodes that interact once will not necessarily interact twice; and the 
precise order in which a group of nodes interacts matters all the more when interactions do not repeat 
infinitely often). We advocate looking at the dynamics at a finer scale, without always assuming infinite 
recurrence on the scheduler (such a scheduler can still be formulated as a specific class of dynamics), in 
the purpose of studying the precise relationship between an algorithm and the dynamics underlying its 
execution. To remain as general as possible, we are building on top of local computations. One may ask 
whether remaining as general is relevant, and whether the various models on Figure|2]are in fact equivalent 
in power {e.g. could we simulate any of them by repetition of another?). The answer is negative due to 
different levels of atomicity {e.g. models [2(a)| vs. [2(c)] l and symmetry breaking {e.g. models [2(c)| vs. [2(d)l ) . 
The reader is referred to [ 14] for a detailed hierarchy of the se models. Note that the equivalences between 
models would have to be re-considered anyway in a dynamic context, since the dynamics may prevent the 
possibility of applying several steps of a weaker model to simulate a stronger one. 

We now describe the graph relabeling formalism traditionally associated with local computations. 
Let the network topology be represented by a finite undirected loopless graph G = (Vg, Eq), with Vq 
representing the set of nodes and Eq representing the set of communication links between them. Two 
vertices u and v are said neighbors if and only if they share a common edge (u, v) in Eq- Let A : Vg U 
Eg ^> £* be a mapping that associates every vertex and edge from G with one or several labels from an 
alphabet C (which denotes all the possible states these elements can take). The state of a given vertex v. 



4 



resp. edge e, at a given time t is denoted by (v), resp. Af (e). The whole labeled graph is represented by 
the pair (G, A), noted G. 

According to |19|, a complete algorithm can be given by a triplet {C,X, P}, where I is the set of 
initial states, and P is a set of relabeling rules (transition patterns) representing the distributed inter- 
actions - these rules are considered uniform (i.e., same for all nodes). The Algorithm 1 below (^i for 
short), gives the example of a one-rule algorithm that represents the general broadcasting scheme dis- 
cussed in the introduction. We assume here that the label / {resp. N) stands for the state informed 
(resp. non-informed). Propagating the information thus consists in repeating this single rule, starting 
from the emitter vertex, until all vertices are labeled /Q 



Algorithm 1 A propagation algorithm coded by a single relabeling rule (ri). 
initial states: {/, A*'} (/ for the initial emitter, for all the other vertices) 
alpliabet: {I, N} 



preconditions(ri): X{vo) — I A A(iii) = A*' 


graphical notation : 






actions(ri): A(iii) := / 


I N 






m • > 


• — 


— • 



Let us repeat that an algorithm does not specify how the nodes synchronize, i.e., how they select 
each other to perform a common computation step. From the abstraction level of local computations, 
this underlying synchronization is seen as an implementation choice (dedicated procedures were designed 
to fit the various models, e.g. local elections |21| and local rendezvous |22| for starwise and pairwise 
interactions, respectively). A direct consequence is that the execution of an algorithm at this level may not 
be deterministic. Another consequence is that the characterization of sufficient conditions on the dynamics 
will additionally require assumptions on the synchronization - we suggest later a generic progression 
hypothesis that serves this purpose. Note that the three algorithms provided in this paper rely on pairwise 
interactions, but the concepts and methodology involved apply to local computations in general. 

2.2 Expressing dynamic network properties using Evolving Graphs 

In a different context, evolving graphs 1 15] were proposed as a combinatorial model for dynamic networks. 
The initial purpose of this model was to provide a suitable representation affixed schedule dynamic net- 
works (FSDNs), in order to compute optimal communication routes such as shortest, fastest and foremost 
journeys [6|. In such a context, the evolution of the network was known beforehand. In the present work, 
we use evolving graphs in a very different purpose, which is to express properties on the network dynam- 
ics. It is important to keep in mind that the analyzed algorithms are never supposed to know the evolution 
of the network beforehand. 

An evolving graph is a structure in which the evolution of the network topology is recorded as a 
sequence of static graphs Sq — Gi,G2,..., where every Gi — {Vi,Ei) corresponds to the network 
topology during an interval of time [ti,ti^i). Several models of dynamic networks can be captured by 
this formalism, depending on the meaning which is given to the sequence of dates S^ = ti, t2, .... For 
example, these dates could correspond to every time step in a discrete-time system (and therefore be taken 
from a time domain T C N), or to variable-size time intervals in continuous-time systems (T C M), where 
each ti is the date when a topological event occurs in the system {e.g., appearance or disappearance of an 
edge in the graph), see for example Figure |3] 

We consider continuous-time evolving graphs in general. (Our results actually hold for any of the 
above meanings.) Formally, we consider an evolving graph as the structure Q ~ (G, Sq, Sj), where G is 

Detecting such a final state is not part of the given algorithm. The reader interested in termination detection as a 
distributed problem is referred to 0171 . 
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the union of all Gi in Sq, called the underlying graph of Q. Henceforth, we will simply use the notations 
V and E to denote V{G) and E{G), the sets of vertices and edges of the underlying graph G. Since we 
focus here on computation models that are undirected, we logically consider evolving graphs as being 
themselves undirected. The original version of evolving graphs considered undirected edges, as well as 
possible restrictions on bandwidth and latency. Finally, we will use the notation ^[4^,4^) to denote the 
temporal subgraph Q' — (G", 5^,5^) built from Q = (G, Sg.St) such that G' = G, S'q = {G; € Sg ■ 
U e [ta,h)], and 5; = {U &S^f^ [ta,h)}. 



period to — >■ t\ 



period tz — i- 
a» ^ e 




(a) Sequence of graphs and dates 




[to,ti) 

(b) A compact representation 



Fig. 3. Example of evolving graph. 



2.3 Basic concepts and notations (given an evolving graph Q — (G, Sg, «5t))- 

As a writing facility, we consider the use of a presence function p : E y. T {0, 1} that indicates 
whether a given edge is present at a given date, that is, for e € E and t e [ii, ti+i) (with ti,ti+i G Sj), 
p{e,t) = 1 <^ e e E,. 

A central concept in dynamic networks is that of journey, which is the temporal extension of the 
concept of path. A journey can be thought of as a path over time from one vertex to another. Formally, a 
sequence of couples J' = {(ei, cti), (e2, (J2) ■ ■ ■ , {ek, <^k)} such that {ei, 62, e^-} is a walk in G and 
{ci, cr2, Cfc} is a non-decreasing sequence of dates from T, is a journey in Q if and only if p{ei, ai) = 1 
for all i < k. We will say that a given journey is strict if every couple {ei,ai) is taken from a distinct graph 
of the sequence Sq- 

Let us denote by J'* the set of all possible journeys in an evolving graph Q, and by J'^^ C J'* 
those journeys starting at node u and ending at node v. If a journey exists from a node w to a node v, 
that is, if J'f*^ ^ 0, then we say that u can reach w in a graph Q, and allow the simplified notations 

It w (in Q), or w -5^ w if this can be done through a strict journey. Clearly, the existence of journey is not 
symmetrical: u v ^ v ^ u; this holds regardless of whether the edges are directed or not, because the 
time dimension creates its own level of direction - this point is clear by the example of Figure [T] Given a 
node u, the set {w e F : w ^ u} is called the horizon of u. We assume that every node belongs to its own 
horizon by means of an empty journey. Here are examples of journeys in the evolving graph of Figure|3] 

- J{a,e)={{ab,ai e [^1,^2)), (fee, (72 e [0-1,^2)), (ce, (73 e [t2,i3))}isajourneyfromatoe; 

- •^(a,e)={(ac, (Ji e [to,ti)),{cd,(72 £ [cti , 1 1 ) , (de, (T3 e [^3, ^4))} is another journey from a to e ; 
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- J(Q.e)={(ac, (Ji G [to,ti)), {cd,a2 G [ti,t2), {de,a3 £ [ta, ^4))} is yet another (s?nc/) journey from 
a to e. 

We will say that the network is connected over time iff Vu, v £ V^u v /\v u. The concept of 
connectivity over time is not new and goes back at least to 1 3 1 , in which it was called eventual connectivity 
(although recent literature on DTNs referred to this terms for another concept that we renamed eventual 
instant-connectivity to avoid confusion in Section|5]l. 

3 The proposed analysis framework 

As a recall of the previous section, the algorithmic state of the network is given by a labeling on the 
corresponding graph G, then noted G. We denote by Gi the graph covering the period [t^, ii+i) in the 
evolving graph Q = {G,Sg,St), with d G Sq and ti,ti+i G Sj. Notice that the symbol G was 
used here with two different meanings: the first as the generic letter to represent the network, the second 
to denote the underlying graph of Q. Both notations are kept as is in the following, while preventing 
ambiguous uses in the text. 

3.1 Putting the pieces together: relabeUngs over evolving graphs 

For an evolving graph Q — {G,Sg,St) and a given date ti G Sj, we denote by Gi the labeled graph 
{Gi, ^ti+e) representing the state of the network just after the topological event of date ti, and by Gi[ the 
labeled graph (G^-i, ^ti-e) representing the network state just before that event. We note 

Eventti (Gi[) = Gi . 

A number of distributed operations may occur between two consecutive events. Hence, for a given algo- 
rithm A and two consecutive dates ti, ti+i G Sj, we denote by TZA^f * j) of the possible relabeUng 
sequence induced by A on the graph Gi during the period [ti, ii+i). We note 

''^-4[t,.t,+i)(Gj) = . 

For simplicity, we will sometimes use the notation ri{u, v) G TIai^ j/, to indicate that the rule Vi is applied 
on the edge {u, v) during [t, t'). A complete execution sequence from to tk is then given by means of 
an alternated sequence of relabeling steps and topological events, which we note 

X=TZa,^ , , o Event. 0..0 Event, oTZa ^ ^ o .. o Event , oTZa , .(Gn) 

This combination is illustrated on Figure |4] As mentioned at the end of Section 12.11 the execution of a 
local computation algorithm is not necessarily deterministic, and may depend on the way nodes select 
one another at a lower level before applying a relabeling rule. Hence, we denote by A^^/g the set of all 
possible execution sequences of an algorithm A over an evolving graph Q. 

3.2 Methodology 

Below are some proposed methods and concepts to characterize the requirement of an algorithm in terms 
of topology dynamics. More precisely, we use the above combination to define the concept of topology- 
related necessary or sufficient conditions, and discuss how a given property can be proved to be so. 
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start Evt-^ Evt^ ■■■ Evt^^-^ end 



Fig. 4. Combination of Graph Relabelings and Evolving Graphs. 

Objectives of an algorithm Given an algorithm A and a labeled graph G, the state one wishes to reach 
can be given by a logic formula V on the labels of vertices (and edges, if appropriate). In the case of the 
propagation scheme (Algorithm 1 Section l2Tt . such a terminal state could be that all nodes are informed, 

Vi{G)=\/v e V,\{v) =1. 

The objective Oa is then defined as the fact of verifying the desired property by the end of the execu- 
tion, that is, on the final labeled graph G^. In this example, we consider Oai = 7'i(Gfc). The opportunity 
must be taken here to talk about two fundamentally different types of objectives in dynamic networks. In 
the example above, as well as in the other examples in this paper, we consider algorithms whose objective 
is to reach a given property by the end of the execution. Another type of objective in dynamic network 
is to consider the maintenance of a desired property despite the network evolution (e.g. covering every 
connected component in the network by a single spanning tree). In this case, the objective must not be 
formulated in terms of terminal state, but rather in terms of satisfactory state, for example in-between ev- 
ery two consecutive topological events, i.e., Oj, = ^Gi E Sg, 'P(Gi+i[). This actually corresponds to a 
self-stabilization scenario where recurTent faults are the topological events, and the network must stabilize 
in-between any two consecutive faults. We restrict ourselves to the first type of objective in the following. 

Necessary conditions Given an algorithm A, its objective Oj, and an evolving graph property C_^f, the 
property Cj^f is a ( topology-related) necessary condition for Oa if and only if 

Proving this result comes to prove that ^Q. -i Cj\/{Q) =^ $X E Xa/q \ V{Gk)- (The desired state is 
not reachable by the end of the execution (time k), unless the condition is verified.) 

Sufficient conditions Symmetrically, an evolving graph property Cg is a (topology-related) sufficient 
condition for A if and only if 

yg,csig) =^ Oa 

Proving this result comes to prove that \/Q, Cs {Q) => E Xa/q , ViGk). 

Because the abstraction level of these computations is not concerned with the underlying synchro- 
nization, no topological property can guarantee, alone, that the nodes will effectively communicate and 
collaborate to reach the desired objective. Therefore, the characterization of sufficient conditions requires 
additional assumptions on the synchronization. We propose below a generic progression hypothesis ap- 
plicable to the parrwise interaction model (Figure [2(c)) . This assumption may or may not be considered 
realistic depending on the expected rate of topological changes. 

Progression Hypothesis 1 (PHi). In every time interval [ti, ii+i), with ti in Sy, each vertex is able to 
apply at least one relabeling rule with each of its neighbors, provided the rule preconditions are already 
satisfied at time ti ( and still satisfied at the time the rule is applied). 
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In the case when starwise interaction (see Figure [2(b)) is considered, this hypothesis could be partially 
relaxed to assuming only that every node applies at least one rule in each interval. 

4 Examples of basic analyses 

This section illustrates the proposed framework through the analysis of three basic algorithms, namely the 
propagation algorithm previously given, and two counting algorithms (one centralized, one decentralized). 
The results obtained here are used in the next section to highlight some implications of this work. 

4.1 Analysis of the propagation algorithm 

We want to prove that the existence of a journey (resp. strict journey) between the emitter and every other 
node is a necessary {resp. sufficient) condition to achieve Oai - Our purpose is not as much to emphasize 
the results themselves - they are rather intuitive - as to illustrate how the characterizations can be written 
in a rigorous way. 

Condition 1 \/v ^ V, emitter ^ v 

(There exists a journey between the emitter and every other vertex). 

Lemma 1 Vu e V" : Afo(w) = iV, Acr>to(w) = I =^ 3u e V,3a' e [to,cr) : \„' (u) =^ I A u 

(If a non-emitter vertex has the information at some point, it implies the existence of an incoming journey 
from a vertex that had the information before) 

Proof Vw e F : At„(w) = N, (A^>to(w) = / =^ 3v' : r^^.^^^ e 7^^l[^o,a)) 

(If a non-emitter vertex has the information at some point, then it has necessarily applied rule ri with 

another vertex) 

=^ 3v' eV,a' ^ [to, a) : X,. {v') = IA p{{v' , v), a') = 1 

(An edge existed at a previous date between this vertex and a vertex labeled /) 

By transitivity, =^ 3v" e V, 3a" e [to, a) : X^" {v") ^ I /\v" v in Q[cr" ^a) 

(A journey existed between a vertex labeled / and this vertex) □ 

Proposition 1 Condition 1 (Ci) is a necessary condition on Q to allow Algorithm 1 (Ai) to reach its 
objective 0_Ai- 

Proof, (using LemmafTli. Following from Lemma[T]and the initial states (/ for the emitter, N for all other 
vertices), we have O^j^ => Ci, and thus -iCi => D 

st 

Condition 2 Vw S V, emitter v 

Proposition 2 Under Progression Hypothesis\l\(PHi, defined in the previous section). Condition 2 (C2) 
is sufficient on Q to guarantee that Ai will reach Oj^-^. 

Proof (l):ByPi/i,Vt, e5T\(tfc),V(ii,w') ei;»,At,H = / =^ Xt,^,{u') ^ I 
By iteration on (1): Vu, V G -u w {Xtg{u)=I ==> Afj^(v)=/) 

Now, because Xtg{emitter) = /, we have €2(0) =^ VX £ -^.A/g, 'Pi(Gfe) □ 
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4.2 Analysis of a centralized counting algorithm 

Like the propagation algorithm, the distributed algorithm presented below assumes a distinguished vertex 
at initial time. This vertex, called the counter, is in charge of counting all the vertices it meets during the 
execution (its successive neighbors in the changing topology). Hence, the counter vertex has two labels 
(C, i), meaning that it is the counter (C), and that it has already counted i vertices (initially 1, i.e., itself). 
The other vertices are labeled either F or N, depending on whether they have already been counted or 
not. The counting rule is given by ri in Algorithm 2, below. 



Algorithm 2 Counting algorithm with a pre-selected counter 



initial states: {(C, 1), A^} ((C, 1) for the counter, for all other vertices) 
alphabet^ {C, N,F,W} 
rule ri: 



CA N CA + 1 
• • > • 



Objective of the algorithm. Under the assumption of a fixed number of vertices, the algorithm reaches 
a terminal state when all vertices are counted, which corresponds to the fact that no more vertices are 
labeled N: 

7?2 = Vw e V, \{v) ^ N 

The objective of Algorithm 2 is to satisfy this property at the end of the execution {Oa-2 ~ ^2(Gfe))- We 
prove here that the existence of an edge at some point of the execution between the counter node and 
every other node is a necessary and sufficient condition. 

Condition 3 Vf G V\{counter}, 3ti G : [counter, v) G Ei, or equivalently with the notion of 
underlying graph, Vf G V\{counter}, (counter, v) G E 

Proposition 3 For a given evolving graph Q representing the topological evolutions that take place during 
the execution of A2, Condition 3 (C3) is a necessary condition on Q to allow A2 to reach its objective O^^. 

Proof. -iC3(^) => 3v G V\{counter} : (counter, v) ^ E 

=^ 3v G V\{counter} : Vti G Sj\{tk},ri (counter, v) ^ 7?.>t2[ti,ii+i) 

=^ 3v e V\{counter} : \fX G A^^/g, At, (v) = N 

^ $Xe X^^/g : P2(Gk) =^ ^Oa, □ 

Proposition 4 Under Progression Hypothesis\l\(noted PHi below), C3 is also a sufficient condition on 
Q to guarantee that A2 will reach its objective 0^2- 

Proof. €-3(0) Vw G V\{counter},3ti G Sj : (counter, v) G Ei 

by PHi, =^ Vw G V\{counter},3ti G Sf : ri(counter,v) G 7^^2[ti,ti+i) 

^ Vi; G V\{counter}, At, (v) ^ N 

=^ VXg A'^,/e,P2(Gfc) =^ Oa, □ 
4.3 Analysis of a decentraUzed counting algorithm 

Contrary to the previous algorithm. Algorithm 3 below does not require a distinguished initial state for any 
vertex. Indeed, all vertices are initialized with the same labels (C, 1), meaning that they are all initially 
counters that have already included themselves into the count. Then, depending on the topological evolu- 
tions, the counters opportunistically merge by pairs (rule ri) in Algorithm ^3. In the optimistic scenario. 
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at the end of the execution, only one node remains labeled C and its second label gives the total number 
of vertices in the graph. A similar counting principle was used in HI to illustrate population protocols - a 
possible application of this protocol was anecdotally mentioned, consisting in monitoring a flock of birds 
for fever, with the role of counters being played by sensors. 



Algorithm 3 Decentralized counting algorithm. 

initial states: {(C, 1)} (for all vertices) 
alphabet: {C,F,W} 
rule ri: 

C,i C] C,i+j F 



Objective of the algorithm Under the assumption of a fixed number of vertices, this algorithm reaches 
the desired state when exactly one vertex remains labeled C: 

V3 = 3ueV ■.\/v e V\{u}, X{u) = C A X{v) ^ C. 

As with the two previous algorithms, the objective here is to reach this property by the end of the 
execution: Oj,:, = V^iGk)- The characterization below proves that the existence of a vertex belonging to 
the horizon of every other vertex is a necessary condition for this algorithm. 

Condition 4 3v e V -.yu e V,u v 

Lemma 2 W G V,3u' £ V : u u' A Xt^ {u') = C 
( Counters cannot disappear from their own horizon.) 

This lemma is proven in natural language because the equivalent steps would reveal substantially longer 
and inelegant (at least, without introducing further notations on sequences of relabelings). One should 
however see without effort how the proof could be technically translated. 

Proof, (by contradiction). The only operation that can suppress C labels is the application of ri. Since all 
vertices are initially labeled C, assuming that Lemma|2]is false (i.e., that there is no C-labeled vertex in 
the horizon of a vertex) comes to assume that a relabeling sequence took place transitively from vertex u 
to a vertex u' that is outside the horizon of u, which is by definition impossible. □ 

Proposition 5 Condition 4 (C4) is necessary /or ^3 to reach its objective O^^. 

Proof ^CiiG) =^ $v eV ■.VueV,U'^v 
=^ Wv e V : Xt,{v) = C,3u e V : u V 

( Given any final counter, there is a vertex that could not reach it by a journey). 
By Lemma|2l =^ Vw e F : A*, (v) = C, 3v' G V\{v} : Af, (v') = C 
(There are at least two final counters). 

=^ --VsiGk) -^Oa, □ 

The characterization of a sufficient condition for ^3 is left open. This question is addressed from a proba- 
bilistic perspective in ||T|, but we believe a deterministic condition should also exist, although very specific. 
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5 Classification of dynamic networks and algorithms 



In this section, we show how the previously characterized conditions can be used to define evolving graph 
classes, some of which are included in others. The relations of inclusion lead to a de facto classification 
of dynamic networks based on the properties they verify. As a result, the classification can in turn be used 
to compare several algorithms or problems on the basis of their topological requirements. Besides the 
classification based on the above conditions, we discuss a possible extension of 10 more classes considered 
in various recent works. 

5.1 From conditions to classes of evolving graphs 

From Ci = Vi; G V, emitter ~^ v, we derive two classes of evolving graphs. Fi is the class in which at 
least one vertex can reach all the others by a journey. If an evolving graph does not belong to this class, 
then there is no chance for Ai to succeed whatever the initial emitter F2 is the class where every vertex 
can reach all the others by a journey. If an evolving graph does not belong to this class, then at least one 
vertex, if chosen as an initial emitter, will fail to inform all the others using Ai . 

st 

From C2 = Vw e V, emitter v, we derive two classes of evolving graphs. is the class in which 
at least one vertex can reach all the others by a if Wcf journey. If an evolving graph belongs to this class, 
then there is at least one vertex that could, for sure, inform all the others using Ai (under Progression 
Hypothesis[T]i. J^^ is the class of evolving graphs in which every vertex can reach all the others by a strict 
journey. If an evolving graph belongs to this class, then the success of A\ is guaranteed for any vertex as 
initial emitter (again, under Progression Hypothesis [T). 

From C3 = Vw G V\{counter^ , {counter^ v) G E, we derive two classes of graphs. Fc, is the class 
of evolving graphs in which at least one vertex shares, at some point of the execution, an edge with every 
other vertex. If an evolving graph does not belong to this class, then there is no chance of success for A2, 
whatever the vertex chosen for counter Here, if we assume Progression Hypothesis [T] then J^s is also a 
class in which the success of the algorithm can be guaranteed for one specific vertex as counter Fq is the 
class of evolving graphs in which every vertex shares an edge with every other vertex at some point of 
the execution. If an evolving graph does not belong to this class, then there exists at least one vertex that 
cannot count all the others using A2- Again, if we consider Progression Hypothesis [T] then becomes a 
class in which the success is guaranteed whatever the counter 

Finally, from C4 = 3w e : Vm G V, m ~^ w, we derive the class F-;, which is the class of graphs such 
that at least one vertex can be reached from all the others by a journey (in other words, the intersection 
of all nodes horizons is non-empty). If a graph does not belong to this class, then there is absolutely no 
chance of success for A^. 

5.2 Relations between classes 

Since all implies at least one, we have: F2 C Fi, F^ C F^, and Fq C ^"5. Since a strict journey is 
a journey, we have: F^ C Fi, and F4, C F2- Since an edge is a (strict) journey, we have: F^ C F^, 
Fq C Fi, and F^ C Fj. Finally, the existence of a journey between all pairs of vertices {F2) implies that 
each vertex can be reached by all the others, which implies in turn that at least one vertex can be reach by 
all the others ( F-;). We then have: F2 C F-j. Although we have used here a non-strict inclusion (C), the 
inclusions described above are strict (one easily find for each inclusion a graph that belongs to the parent 
class but is outside the child class). Figure |5] summarizes all these relations. 

Further classes were introduced in the recent literature, and organized into a classification in [?]. They 
include F% (round connectivity): every node can reach every other node, and be reached back afterwards; 
J'g : {recurrent connectivity): every node can reach all the others infinitely often; J^io (recurrence of edges): 
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Fig. 5. A first classification of dynamic networks, based on evolving graph properties that result from the analysis of 
Section|4] 



the underlying graph G — {V, E) is connected, and every edge in E re-appears infinitely often; Fn {time- 
bounded recurrence of edges): same as J^io, but the re-appearance is bounded by a given time duration; 
J-"i2 {periodicity): the underlying graph G is connected and every edge in E re-appears at regular intervals; 
J-'is {eventual instant-routability): given any pair of nodes and at any time, there always exists a future G; 
in which a (static) path exists between them; {eventual instant-connectivity): at any time, there always 
exists a future Gi that is connected in a classic sense {i.e., a static path exists in Gi between any pair 
of nodes); Fi^ {perpetual instant-connectivity): every Gi is connected in a static sense; Fiq {T-interval- 
connectivity): all the graphs in any sub-sequence Gi, Gi+i, ...Gi^T have at least one connected spanning 
subgraph in common. Finally, Fn is the reference class for population protocols, it corresponds to the 
subclass of FiQ in which the underlying graph G {graph of interaction) is a complete graph. 

All these classes were shown to have particular algorithmic significance. For example, Fiq allows to 
speed up the execution of some algorithms by a factor T ifTsl . In a context of broadcast, Fi^ allows to have 
at least one new node informed in every Gi, and consequently to bound the broadcast time by (a constant 
factor of) the network size |23|. Fij, and Fu were used in [241 to characterize the contexts in which 
non-delay -tolerant mvLling protocols can eventually work if they retry upon failure. Classes J^io, Fn, and 
F12 were shown to have an impact on the distributed versions of foremost, shortest, and /aifeif broadcasts 
with termination detection. Precisely, foremost broadcast is feasible in J^io, whereas shortest and fastest 
broadcasts are not; shortest broadcast becomes feasible in Fn |10|, whereas fastest broadcast is not and 
becomes feasible in Fi2. Also, even though foremost broadcast is possible in J^io, the memorization of 
the journeys for subsequent use is not possible in J^io nor Fn; it is however possible in F12 ITTI . Finally, 
Fs, could be regarded as a sine qua non for termination detection in many contexts. 

Interestingly, this new range of classes - from F?, to Fn - can also be integrally connected by means 
of a set of inclusion relations, as illustrated on Figure |6] Both classifications can also be inter-connected 
through F%, a subclass of F2, which brings us to 17 connected classes. A classification of this type can be 
useful in several respects, including the possibility to transpose results or to compare solutions or problems 
on a formal basis, which we discuss now. 



Fig. 6. Complementary classification, based on further classes found in the recent literature (figure from [?]). 
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5.3 Comparison of algorithms based on tlieir topological requirements 

Let us consider the two counting algorithms given in Section 4. To have any chance of success, A2 requires 
the evolving graph to be in (with a fortunate choice of counter) or in Te (with any vertex as counter). On 
the other hand, ^3 requires the evolving graph to be in J^y. Since both ^"5 (directly) and J^e (transitively) 
are included in 7^7, there are some topological scenarios {i.e., Q G J-7\J-5) in which A2 has no chance of 
success, while ^3 has some. Such observation allows to claim that A3 is more general than A2 with respect 
to its topological requirements. This illustrates how a classification can help compare two solutions on a 
fair and formal basis. In the particular case of these two counting algorithms, however, the claim could be 
balanced by the fact that a sufficient condition is known for A2, whereas none is known for ^3. The choice 
for the right algorithm may thus depend on the target mobility context: if this context is thought to produce 
topological scenarios in J's or J^q, then A2 could be preferred, otherwise ^3 should be considered. 

A similar type of reasoning could also teach us something about the problems themselves. Consider 
the above-mentioned results about shortest, fastest, foremost broadcast with termination detection, the 
fact that 7^12 is included in Fn, which is itself included in J^io, tells us that there is a (at least partial) 
order between these problems topological requirements: foremost < shortest ^ fastest. 

We believe that classifications of this type have the potential to lead more equivalence results and for- 
mal comparison between problems and algorithms. Now, one must also keep in mind that these are only 
topology-related conditions, and that other dimensions of properties - e.g., what knowledge is available 
to the nodes, or whether they have unique identifiers - keep playing the same important role as they do 
in a static context. Considering again the same example, the above classification hides that detecting ter- 
mination in Iht foremost case in requires the emitter to know the number of nodes n in the network, 
whereas this knowledge is not necessary for shortest broadc ast in Fi 1 (the alternative knowledge of know- 
ing a bound on the recurrence time is sufficient). In other words, lower topology-related requirements do 
not necessarily imply lower requirements in general. 

6 Mechanization potential 

One of the motivations of this work is to contribute to the development of assistance tools for algorithmic 
design and decision support in mobile ad hoc networks. The usual approach to assess the correct behavior 
of an algorithm or its appropriateness to a particular mobility context is to perform simulations. A typical 
simulation scenario consists in executing the algorithm concurrently with topological changes that are 
generated using a mobility model {e.g., the random way point model, in which every node repeatedly 
selects a new destination at random and moves towards it), or on top of real network traces that are first 
collected from the real world, then replayed at simulation time. As discussed in the introduction, the 
simulation approach has some limitations, among which generating results that are difficult to generalize, 
reproduce, or compare with one another on a non-subjective basis. 

The framework presented in this paper allows for an analytical alternative to simulations. The previ- 
ous section already discussed how two algorithms could be compared on the basis of their topological 
requirements. We could actually envision a larger-purpose chain of operations, aiming to characterize 
how appropriate a given algorithm is to a given mobility context. The complete workflow is depicted on 
Figure I2] 

On the one hand, algorithms are analyzed, and necessary/sufficient conditions determined. This step 
produces classes of evolving graphs. On the other hand, mobility models and real-world networks can 
be used to generate a collection of network traces, each of which corresponds to an instance of evolving 
graphs. Checking how given instances distribute within given classes - i.e., are they included or not, in 
what proportion? - may give a clue about the appropriateness of an algorithm in a given mobility context. 
This section starts discussing the question of understanding to what extent such a workflow could be 
automated {mechanized), in particular through the two core operations of Inclusion checking and Analysis, 
both capable of raising problems of a theoretical nature. 
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Fig. 7. Automated checking of the suitability of an algorithm in various mobility contexts. 



6.1 Checking network traces for inclusion in the classes 



We provide below an efficient solution to check the inclusion of an evolving graph in any of the seven 
classes of Figure |5]- that are, all classes derived from the analysis carried out in Section |4] Interestingly, 
each of these classes allows for efficient checking strategies, provided a few transformations are done. 
The transitive closure of the joumeys of an evolving graph Q is the graph H — (V, A}j), where An ~ 
{(wijWj) : Vi Wj)}. Because joumeys are oriented entities, their transitive closure is by nature a t//recfet/ 
graph (see Figure|8). As explained in |31, the computation of transitive closures can be done efficiently, in 
0([y |.|i?|.(Zog|5T|./o(7|y|) time, by building the tree of i/jorfe^f joumeys from each node in the network. 
We extend this notion to the case of strict journeys, with Hstrict = (^j ^//strict )' where An^tr-iot = 

{iVi,Vj) 





[2,3) ' b ^ d 

Fig. 8. Example of transitive closure of the joumeys of an evolving graph. 



Given an evolving graph Q, its underlying graph G, its transitive closure H, and the transitive closure 
of its ifncf joumeys Hstrict, the inclusion in each of the seven classes can be tested as follows: 

- G J'l -^^^^^ H contains an out-dominating set of size 1 . 

- e •=S=> H is a complete graph. 

- G J'3 •^=^ Hstrict contains an out-dominating set of size 1 . 

- G J'4 •^=^ Hstrict is a complete graph. 

- ^ e G contains a dominating set of size 1 . 

- G J'e ■^=^ G is a complete graph. 

- G ^ J'T *S==> H contains an in-dominating set of size 1 . 

How the classes of Figure |6] could be checked is left open. Their case is more complex, or at least 
substantially different, because the coiTesponding definitions rely on the notion of infinite, which a network 
trace is necessarily not. For example, whether a given edge is eventually going to reappear (e.g. in the 
context of checking inclusion to class J's or J'g) cannot be inferred from a finite sequence of events. 
However, it is certainly feasible to check whether a given recurrence bound applies within the time-span 
of a given network trace (bounded recurrence J-iq), or similarly, whether the sequence of events repeats 
modulo p (for a given p) within the given trace (periodic networks J^u). 
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6.2 Towards a mechanized analysis 



The most challenging component of the workflow on Figure|7]is certainly that of Analysis. Ultimately, one 
may hope to build a component like that of Figure|9] which is capable of answering whether a given prop- 
erty is necessary (no possible success without), sufficient (no possible failure with), or orthogonal (both 
success and failure possible) to a given algorithm with given computation assumptions {e.g., a particular 
type of synchronization or progression hypothesis). Such a workflow could ultimately be used to confirm 
an intuition of the analyst, as well as to discover new conditions automatically, based on a collection of 
properties. 



As of today, such an objective is still far from reach, and a number of intermediate steps should be 
taken. For example, one may consider specific instances of evolving graphs rather than general properties. 
We develop below a prospective idea inspired by the work of Casteran et al. in static networks liSiTl . Their 
work focus on bridging the gap between local computations and the formal proof management system 
Coq m, and materializes, among others, as the development of a Coq library: Loco. This library contains 
appropriate representations for graphs and labelings in Coq (by means of sets and maps), as well as an 
operational description of relabeling rule execution (see Section 6 of [|7J for details). The fact that such a 
machinery is already developed is worthwhile noting, because we beUeve evolving graphs could be seen 
themselves as relabelings acting on a 'presence' label on vertices and edges. The idea in this case would be 
to re-define topological events as being themselves graph relabeling rules whose preconditions correspond 
to a Gi and actions lead to the next G^+i. Considering the execution of these rules concurrently with 
those of the studied algorithm could make it possible to leverage the power of Coq to mechanize proofs 
of correctness and/or impossibility results in given instances of evolving graphs. 

7 Concluding remarks and open problems 

This paper suggested the combination of existing tools and the use of dedicated methods for the analysis of 
distributed algorithms in dynamic networks. The resulting framework allows to characterize assumptions 
that a given algorithm requires in terms of topological evolution during its execution. We illustrated it 
by the analysis of three basic algorithms, whose necessary and sufficient conditions were derived into a 
sketch of classification of dynamic networks. We showed how such a classification could be used in turn 
to compare algorithms on a formal basis and provide assistance in the selection of an algorithm. This 
classification was extended by an additional 10 classes from recent literature. We finally discussed some 
implications of this work for mechanization of both decision support systems and analysis, including 
respectively the question of checking whether a given network trace belongs to one of the introduced 
classes, and prospective ideas on the combination of evolving graph and graph relabeling systems within 
the Coq proof assistant. 

Analyzing the network requirements of algorithms is not a novel approach in general. It appears how- 
ever that it was never considered in systematic manner for dynamics-related assumptions. Instead, the 
apparent norm in dynamic network analytical research is to study problems once a given set of assump- 
tions has been considered, these assumptions being likely chosen for analytical convenience. This appears 



Evolving graph property 



Computational assumptions 




Mechanized analysis]^ {Necessary, Suf ficient, None} 



Fig. 9. Possible interface for a mechanized analysis. 
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particularly striking in the recent field of population protocols, where a common assumption is that a pair 
of nodes interacting once will interact infinitely often. In the light of the classification shown is this paper, 
such an assumption corresponds to a highly specific computing context. We believe the framework in this 
paper may help characterize weaker topological assumptions for the same class of problems. 

Our work being mostly of a conceptual essence, a number of questions may be raised relative to its 
broader apphcability. For example, the algorithms studied here are simple. A natural question is whether 
the framework will scale to more complex algorithms. We hope it could suit the analysis of most fun- 
damental problems in distributed computing, such as election, naming, concensus, or the construction 
of spanning structures (note that election and naming may not have identical assumptions in a dynamic 
context, although they do in a static one). Our discussion on mechanization potentials left two significant 
questions undiscussed: how to check for the inclusion of an evolving graph in all the remaining classes, 
and how to approach the problem of mechanizing analysis relative to a general property. Another prospect 
is to investigate how intermediate properties could be explored between necessary and sufficient condi- 
tions, for example to guarantee a desired probability of success. Finally, besides these characterizations 
on feasibihty, one may also want to look at the impact that particular properties may have on the complex- 
ity of problems and algorithms. Analytical research in dynamic networks is still in its infancy, and many 
exiting questions remain to be explored. 
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